Bug 32744 - libvirt-1.2.9-9+deb8u2
libvirt-1.2.9-9+deb8u2
Status: CLOSED FIXED
Product: UCS
Classification: Unclassified
Component: Virtualization - UVMM
UCS 3.2
All Linux
: P5 normal (vote)
: UCS 3.3
Assigned To: Philipp Hahn
Erik Damrose
:
Depends on:
Blocks: 41205
  Show dependency treegraph
 
Reported: 2013-09-30 09:34 CEST by Philipp Hahn
Modified: 2016-06-07 21:35 CEST (History)
1 user (show)

See Also:
What kind of report is it?: ---
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Philipp Hahn univentionstaff 2013-09-30 09:34:44 CEST
We should update the newer libvirt version from Debian, which is planned for the next point release. It contains several patches we already carry in our own patched UCS version, but also includes some more patches, which fix crashes and security issues:

<http://packages.debian.org/source/wheezy/libvirt>
<http://www.debian.org/security/2013/dsa-2764>
<https://www.redhat.com/archives/libvir-list/2013-September/msg00773.html>

01/12] daemon: Fix crash in virTypedParameterArrayClear
04/12] Revert "rpc: Discard non-blocking calls only when necessary"
  UCS: 21_Revert-rpc-Discard-non-blocking-calls-only-when-nece.patch
06/12] rpc: Fix crash on error paths of	message dispatching
  UCS: 3004-rpc-Fix-crash-on-error-paths-of-message-dispatching.patch
02/12] security: Fix libvirtd crash possibility
08/12] storage: Need to also VIR_FREE(reg)
09/12] conf: Remove callback from stream when freeing entries in console hash
10/12] conf: Remove console stream callback only when freeing console helper
12/12] Fix race condition when destroying guests
11/12] Don't ignore return value of qemuProcessKill
07/12] qemu: Add support for -no-user-config
03/12] build: fix virnetlink on glibc 2.11
05/12] qemu: Fix off-by-one error while unescaping monitor strings
  UCS: 3003-Bug-30052-qemu-Fix-off-by-one-error.patch
Comment 1 Philipp Hahn univentionstaff 2013-10-01 23:52:36 CEST
ANNOUNCE: libvirt 0.9.12.2 maintenance release, Guido Günther
<https://www.redhat.com/archives/libvir-list/2013-October/msg00045.html>
Comment 2 Philipp Hahn univentionstaff 2016-03-10 10:52:17 CET
Version 1.2.9-9~bpo70+1 Rev 78247       Date 2016-03-08 16:20:07
        Release 3.3-0-0

[16044] libvirt/3.3-0-0-ucs/: patch merged by repo-ng - create folder
[16045] libvirt/3.3-0-0-ucs/0.9.12-5/: patch merged by repo-ng - from libvirt/3.2-0-0-ucs/ 0.9.12-5-errata3.2-4 to libvirt/3.3-0-0-ucs/0.9.12-5
[16046] libvirt/3.3-0-0-ucs/0.9.12-5/25_xen-default.patch: Bug #40697 xen: Re-built for UCS-3.3
[16062] libvirt/3.3-0-0-ucs/1.2.7-11/: patch merged by repo-ng - from libvirt/4.0-0-0-ucs/1.2.7-11 to libvirt/ 3.3-0-0-ucs/1.2.7-11
[16063] libvirt/3.3-0-0-ucs/1.2.7-11: Bug #40697 xen: UCS-3.3
[16119] libvirt/3.3-0-0-ucs/1.2.7-11: Bug #40697 libvirt: Fix upgrade problem
[16131] libvirt/3.3-0-0-ucs/1.2.9-9~bpo70+1/: patch merged by repo-ng from libvirt/3.3-0-0-ucs/1.2.7-11 to libvirt/ 3.3-0-0-ucs/1.2.9-9~bpo70+1
[16133] libvirt/3.3-0-0-ucs/1.2.9-9~bpo70+1: Bug #40697: libvirt-1.2.9
[16151] libvirt/3.3-0-0-ucs/1.2.9-9~bpo70+1/ 0000-Update-to-deb8u2.patch: Bug #40697: libvirt-1.2.9

Package: libvirt
Version: 1.2.9-9+deb8u2~ucs3.3.136.201603091728
Branch: ucs_3.3-0

Based on <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=817015> which fixes <https://security-tracker.debian.org/tracker/CVE-2015-5313>
and <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816602>

r68023 | Bug #32744,Bug #40697: libvirt,xen
Comment 3 Philipp Hahn univentionstaff 2016-05-09 12:38:44 CEST
r16477 | Bug #40318 libvirt: qemu-kvm-1.1.2 JSON migration

Package: libvirt
Version: 1.2.9-9+deb8u2~ucs3.3.139.201605091213
Branch: ucs_3.3-0
Comment 4 Erik Damrose univentionstaff 2016-05-12 14:12:13 CEST
Reopen: libvirt does not connect to XEN

# virsh -c xen:///
error: failed to connect to the hypervisor
error: internal error: Error adding file to config list

libvirtd log output show several errors:
error : virCommandWait:2533 : internal error: Child process (LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11:/opt/scalix/bin HOME=/root USER=root LOGNAME=root /usr/bin/kvm -no-user-config -device '?' -device 'pci-assign,?' -device 'virtio-blk-pci,?' -device 'virtio-net-pci,?' -device 'scsi-disk,?' -device 'PIIX4_PM,?' -device 'usb-redir,?' -device 'ide-drive,?' -device 'usb-host,?' -device 'scsi-generic,?' -device 'usb-storage,?') unexpected exit status 1: Could not access KVM kernel module: No such file or directory
...
error : xenHypervisorDoV2Sys:1013 : Unable to issue hypervisor ioctl 3166208: Keine Berechtigung
error : xenInotifyXendDomainsDirLookup:113 : internal error: finding dom on config list
error : xenInotifyXendDomainsDirAddEntry:195 : internal error: Error looking up domain
error : xenInotifyOpen:379 : internal error: Error adding file to config list
error : virNetSocketReadWire:1563 : Cannot recv data: Eingabe-/Ausgabefehler
Comment 5 Philipp Hahn univentionstaff 2016-05-18 16:13:46 CEST
2016-05-18 12:44:45.451+0000: 6400: debug : xenUnifiedConnectOpen:521 : Trying Xen inotify sub-driver
2016-05-18 12:44:45.451+0000: 6400: debug : xenInotifyXendDomainsDirLookup:97 : Looking for dom with uuid: d4f6e64e-4fd2-8463-3925-c6e8154868ea
2016-05-18 12:44:45.453+0000: 6400: debug : virFileClose:99 : Closed fd 26
2016-05-18 12:44:45.453+0000: 6400: error : xenInotifyXendDomainsDirLookup:113 : internal error: finding dom on config list
2016-05-18 12:44:45.453+0000: 6400: error : xenInotifyXendDomainsDirAddEntry:195 : internal error: Error looking up domain
2016-05-18 12:44:45.453+0000: 6400: error : xenInotifyOpen:379 : internal error: Error adding file to config list
2016-05-18 12:44:45.453+0000: 6400: debug : xenUnifiedConnectOpen:540 : Failed to activate a mandatory sub-driver
2016-05-18 12:44:45.454+0000: 6400: debug : virFileClose:99 : Closed fd 21
2016-05-18 12:44:45.454+0000: 6400: debug : do_open:1152 : driver 4 Xen returned ERROR


UCS-3.2-7:

# dpkg -S /usr/lib64
libc6: /usr/lib64

# dpkg -c /var/cache/apt/archives/libc6_2.11.3-4.24.201508171457_amd64.deb | grep /usr/lib64
lrwxrwxrwx root/root         0 2015-08-21 16:53 ./usr/lib64 -> lib

# apt-get -qq -d {--re,}install --print-uris libc6
'http://univention-repository.knut.univention.de/3.2/maintained/3.2-7/amd64/libc6_2.11.3-4.24.201508171457_amd64.deb' libc6_2.11.3-4.24.201508171457_amd64.deb 4281266 MD5Sum:8316c0958a3eec5a50431613e4266f60


UCS-3.3-0:

# apt-get -qq -d {--re,}install --print-uris libc6
'http://updates-test.software-univention.de/3.3/maintained/3.3-0/amd64/libc6_2.13-38~ucs3.3.44.201602211329_amd64.deb' libc6_2.13-38~ucs3.3.44.201602211329_amd64.deb 4352026 MD5Sum:c94cc51bd1cdcc6dd1836e94b790073f

# dpkg -c /var/cache/apt/archives/libc6_2.13-38~ucs3.3.44.201602211329_amd64.deb | grep /usr/lib64



# ln -s lib /usr/lib64
# apt-get install xen-4.1
# /etc/init.d/xend restart


r69386 | Bug #40697 xen: Create lib64 transition symlinks manually
 Make historic "/usr/lib64/xen/bin/qemu-dm" work again also in UCS-3.3.

Successful build
Package: xen-4.1
Version: 4.1.6.1-8.60.201605181600
Branch: ucs_3.3-0
Comment 6 Philipp Hahn univentionstaff 2016-05-24 11:03:05 CEST
Similar to Bug #29532 3.2-0-0-ucs/0.9.12-5-errata3.2-4/40_Bug29532_xen-pygrub.patch
 r16536 | Bug #32744 libvirt: Re-fix Bug #29532

Package: libvirt
Version: 1.2.9-9+deb8u2.142.201605241053
Branch: ucs_3.3-0
Comment 7 Erik Damrose univentionstaff 2016-05-24 13:03:09 CEST
OK: connection to XEN
OK: Create/modify/delete/migrate VMs that were setup on 3.2 or 3.3
OK: Start/stop/VNC
OK: Setup + operation of UCS + Windows
OK: changelog
Verified
Comment 8 Stefan Gohmann univentionstaff 2016-06-07 21:35:50 CEST
UCS 3.3 has been released:
 https://docs.software-univention.de/release-notes-3.3-0-en.html
 https://docs.software-univention.de/release-notes-3.3-0-de.html

If this error occurs again, please use "Clone This Bug".